Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/KLhPBL2V1p6eH8MFMD4KISIZMPw.roa
File: KLhPBL2V1p6eH8MFMD4KISIZMPw.roa (raw, json)
Hash identifier: i3XrWoh37U4fK2ppSLoxAjBzRfTAeH85VC2nk0unVUA=
Subject key identifier: 28:B8:4F:04:BD:95:D6:9E:9E:1F:C3:05:30:3E:0A:21:22:19:30:FC
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019FD1FF14D4DBC43B4B3776DA616A3A089B
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/KLhPBL2V1p6eH8MFMD4KISIZMPw.roa
Signing time: Wed 05 Aug 2026 12:56:22 +0000
ROA not before: Wed 05 Aug 2026 12:56:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 168.151.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:ff:14:d4:db:c4:3b:4b:37:76:da:61:6a:3a:08:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Aug 5 12:56:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28b84f04bd95d69e9e1fc305303e0a21221930fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:72:9c:11:f6:5e:67:d7:fc:73:b9:c2:fe:
5f:4e:70:12:c2:d2:d7:21:aa:81:f3:b8:62:9f:7e:
12:cc:bc:93:83:d5:75:55:b5:cb:16:d9:fd:f4:8c:
42:e8:0c:53:06:2b:1b:44:e6:5f:b8:b7:bc:6d:06:
0c:6e:8a:e8:46:16:5f:c3:78:6e:d7:b6:44:7a:ee:
10:a8:dd:d2:6d:5d:55:3c:52:78:a7:c4:74:cb:9c:
5f:d1:93:16:cd:a5:51:66:25:8d:af:03:a6:30:e2:
b8:b3:80:89:1e:8f:f2:ff:80:c9:4d:52:91:09:8e:
24:20:39:58:32:14:71:6f:63:d2:ad:3b:6b:2f:65:
ac:53:36:11:31:27:d8:6c:0c:59:6a:7c:70:3d:e3:
b3:87:e9:d3:69:b1:07:c5:da:88:0f:88:d8:f7:6d:
da:c6:81:90:1a:48:a3:91:fe:d4:31:7b:ee:5a:fd:
83:45:8b:d5:33:e0:bd:a1:74:ac:b0:1f:b0:07:64:
50:e9:b9:2f:be:39:a1:25:91:06:2f:9b:d6:c5:1b:
25:23:3f:b8:7c:6c:2a:9f:d5:ef:da:1b:14:94:34:
0d:0d:a8:07:62:8a:03:9b:02:af:82:9c:d1:d3:4d:
70:55:3d:8c:cb:25:bd:7d:76:19:35:2e:7a:03:4a:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:4F:04:BD:95:D6:9E:9E:1F:C3:05:30:3E:0A:21:22:19:30:FC
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/KLhPBL2V1p6eH8MFMD4KISIZMPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.151.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e9:6d:5e:de:dd:b1:de:8e:b6:8a:aa:ac:d6:9c:02:fa:ef:
6b:5e:06:f0:10:95:8c:56:1f:95:87:0b:80:9c:4a:2e:24:76:
65:f7:b6:d4:53:73:01:c0:20:e2:8d:55:32:06:6c:78:22:d5:
42:17:5d:58:89:9a:22:1a:41:91:cb:d0:4a:32:51:23:4b:2b:
ad:e5:97:07:da:31:d2:9e:08:62:a1:87:19:28:01:b5:87:bb:
30:e0:82:19:4a:c1:b6:e3:80:eb:59:58:ab:99:e2:f2:bb:a3:
2a:6e:2d:c8:0e:1e:f6:13:ae:db:f8:9f:54:44:0b:47:77:e6:
65:66:e6:48:fb:7e:68:1f:6b:b1:85:8a:a6:2f:a8:28:83:d8:
9e:17:9b:87:bb:4a:0c:79:b5:c5:aa:b9:27:91:91:45:d7:f0:
92:d1:1d:e6:07:f9:f3:d4:16:a4:d2:c9:cf:a1:21:2d:5a:a9:
68:4f:9f:04:77:b7:9c:c7:4e:99:37:e5:f7:78:f5:3f:cc:fd:
61:78:2d:f0:46:49:93:96:0c:af:cb:9e:5f:55:50:9a:d1:60:
17:6c:d5:55:73:5a:b9:cb:be:79:10:ef:84:06:d5:b7:f9:05:
8e:93:17:b7:ff:a6:03:68:40:b8:57:56:d0:67:84:c8:62:c9:
df:df:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:44 2026 by rpki-client